https://github.com/shivsahni/NSBrute

Python utility to takeover domains vulnerable to AWS NS Takeover
https://github.com/shivsahni/NSBrute

Last synced: about 1 month ago
JSON representation

Python utility to takeover domains vulnerable to AWS NS Takeover

• Host: GitHub
• URL: https://github.com/shivsahni/NSBrute
• Owner: shivsahni
• Created: 2019-08-07T06:03:47.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2023-02-02T02:29:58.000Z (almost 2 years ago)
• Last Synced: 2024-08-01T10:17:23.174Z (4 months ago)
• Language: Python
• Homepage:
• Size: 21.5 KB
• Stars: 82
• Watchers: 3
• Forks: 28
• Open Issues: 4
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-bugbounty-tools - NSBrute - Python utility to takeover domains vulnerable to AWS NS Takeover (Miscellaneous / Subdomain Takeover)

README

        
# NSBrute

 NSBrute is a command line utility built using Python that allows you to gain access to the vulnerable domain by exploiting NS Takeover vulnerability. If you want to know about NS Takeover feel free to refer [this](https://medium.com/@shivsahni2/aws-ns-takeover-356d2a293bca).

## Prerequisites

* Programmatic access to AWS account

* Support for Python 2.7

## Executing

Clone the repo

```

git clone https://github.com/shivsahni/NSBrute.git

```

Install the dependencies

```

pip install -r requirements.txt

```

Once the script is cloned, and the requirements have been successfully installed, run the script using your AWS Access Key and Secret Key as shown below:

```bash

python NSBrute.py -d domain -a accessKey -s secretKey 

```

If you want to force delete the failed zones you made during testing, you can ran a command similar to this (provide a `-f` at the end):

```bash

python NSBrute.py -d domain -a accessKey -s secretKey -f

```

The script would be indefinitely creating the zones for the vulnerable domains in your AWS account until it finds a zone with a common nameserver.



Once the script creates a zone with a common nameserver you can log in to your AWS account to create the resource records for the domain to have the complete control over the domain.



If you want to terminate the script while it is still running, control + c will cause it to stop running and you will be prompted to provide `y` to force delete any stale hosted zones or literally any other character sequence to just quit immediately.